Impossible differential attack

From CryptoDox, The Online Encyclopedia on Cryptography and Information Security

Impossible differential cryptanalysis is a form of differential cryptanalysis for block ciphers. While ordinary differential cryptanalysis tracks differences that propagate through the cipher with greater than expected probability, impossible differential cryptanalysis exploits differences that are impossible at various intermediate states of the algorithm.